V-229007

Discussion

Dynamic user account management prevents disruption of operations by minimizing the need for system restarts. Dynamic establishment of new user accounts will occur while the system is operational. New user accounts or changes to existing user accounts must take effect without the need for a system or session restart. Pre-established trust relationships and mechanisms with appropriate authorities (e.g., Active Directory or authentication server) that validate each user account are essential to prevent unauthorized access by changed or revoked accounts.

Check Content

Verify the BIG-IP appliance is configured to use a properly configured authentication server that dynamically manages user accounts. 

Navigate to the BIG-IP System manager >> System >> Users >> Authentication.

Verify that "User Directory" is set to an approved authentication server type that is configured to dynamically manage user accounts.

If the BIG-IP appliance is not configured to use a properly configured authentication server to dynamically manage user accounts, this is a finding.